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Abstract 

This paper develops verification methodology for quantum programs, and the contribution of the paper is two- 
fold: 

• Sharir, Pnueli and Hart [SIAM J. Comput. 13(1984)292-314] presented a general method for proving 
properties of probabilistic programs, in which a probabilistic program is modeled by a Markov chain and an 
assertion on the output distribution is extended into an invariant assertion on all intermediate distributions. 
Their method is essentially a probabilistic generalization of the classical Floyd inductive assertion method. 
In this paper, we consider quantum programs modeled by quantum Markov chains which are defined by 
super-operators. It is shown that the Sharir-Pnueli-Hart method can be elegantly generalized to quantum 
programs by exploiting the Schrddinger-Heisenberg duality between quantum states and observables. In 
particular, a completeness theorem for the Sharir-Pnueli-Hart verification method of quantum programs is 
established. 

• As indicated by the completeness theorem, the Sharir-Pnueli-Hart method is in principle effective for verify- 
ing all properties of quantum programs that can be expressed in terms ofHermitian operators (observables). 
But it is not feasible for many practical applications because of the complicated calculation involved in the 
verification. For the case of finite-dimensional state spaces, we find a method for verification of quan- 
tum programs much simpler than the Sharir-Pnueli-Hart method by employing the matrix representation 
of super-operators and Jordan decomposition of matrices. In particular, this method enables us to com- 
pute easily the average running time and even to analyze some interesting long-run behaviors of quantum 
programs in a finite-dimensional state space. 



1 Introduction 

The need of techniques for verification of quantum programs comes from two areas: 

• Since the early 1980s, various quantum communication protocols have been proposed, and now quan- 
tum cryptographic systems are already commercially available from Id Quantique, MagiQ Technologies, 
SmartQuantum and NEC. A salient advantage of quantum communication over classical communication is 
that its security is provable based on the principles of quantum mechanics. However, it is very difficult to 
guarantee the correctness of protocols at the stage of design. Some simple classical protocols were finally 
found to have fundamental flaws. The case of quantum protocols is even worse because of the combined 
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weirdness of cryptographic protocols and the quantum world. Indeed, an attack on Id Quantique's commer- 
cial quantum cryptographic system was recently reported [24J. Since quantum communication protocols 
can be expressed as quantum programs, the need in this area is urgent. 

• Steady progress in the techniques of quantum devices has made people widely believe that large-scalable 
and functional quantum computers will be eventually built. Once quantum computers come into truth, 
quantum programming techniques will play a key role in exploiting the power of quantum computers. It is 
likely that programmers will commit faults more often in designing programs for quantum computers than 
programming classical computers, since human intuition is much better adapted to the classical world than 
the quantum world. Therefore, verification techniques and tools will be indispensable to warrant correctness 
of quantum programs. The need in this area is not urgent because quantum hardware is still in its infancy, 
but it will be huge when quantum computers are commercialized. 

Several techniques for verifying quantum programs have already been developed in the last 10 years |[T5ll22l . 
Various formal semantics have been defined for the existing quantum programming languages, and they can be 
used to reason about the correctness of quantum programs written in these languages; for example, an operational 
semantics was given to Sanders and Zuliani's language qGCL ll20l |29 1. a denotational semantics was defined 
for Selinger's QPL [21] by representing quantum programs as super-operators, and a denotational semantics of 
Altenkirch and Grattage's language QML |1] was described in category-theoretic terms. Another research line 
is language-independent approach; for example, D'Hondt and Panangaden iTTl proposed the Hermitian operator 
representation of quantum predicates and thus introduced an intrinsic notion of quantum weakest preconditions, 
and quantum predicate transformer semantics was further developed by Ying et al. ||25, 26 J. Also, a few program 
logics have been introduced into the quantum setting; for example, Baltag and Smets Q proposed a dynamic logic 
formalism of information flows in quantum systems, Brunei and Jorrand [V] found a way of applying Birkhoff and 
von Neumann's quantum logic to reason about quantum programs, Chadha, Mateus and Sernadas [8| presented 
a Floyd-Hoare logic for quantum programs with bounded iterations, and Feng et al. [.14,1 introduced some useful 
proof rules for reasoning about quantum loops. 

Quantum mechanics is an intrinsically probabilistic theory. So, it is natural to see whether the successful meth- 
ods for verifying probabilistic programs can be generalized to the quantum case. Sharir, Pnueli and Hart ll23l 
introduced a general method for verifying probabilistic programs. The method is language-independent, and it 
models a probabilistic program as a Markov chain defined on the program states. An initial distribution of the 
program state is given, and a set of terminal states is assumed. At each step of the execution, the distribution 
of the next state is determined by the distribution of the current state and the matrix of transition probabilities 
of the Markov chain, and the terminal states remain unchanged. The Markov chain model is very popular in the 
current studies of probabilistic programs EKTOllll. The property of the program to be verified is an assertion on 
the distribution of the terminal states, and it is represented by a linear functional of the state distribution. The key 
idea of this method is to extend it into an invariant assertion on all intermediate distributions of the program states, 
including the initial one. Thus, the problem of verifying the program is reduced to checking whether the initial 
distribution satisfies the invariant assertion without computing the distribution of the terminal states, which is usu- 
ally formidable. This method is essentially a probabilistic generalization of the classical Floyd inductive assertion 
method for deterministic programs. The Sharir-Pnueli-Hart method can be used to infer statistical properties of a 
deterministic program, such as its average running time, the expected value of certain output variable, the probabil- 
ity of program termination, etc., when the inputs of the programs are drawn with a known probability distribution. 
Also, it can be used to analyze random algorithms in which the decision at nondeterministic branching is made 
according to certain known probability distribution. 

Our Contribution: The first aim of this paper is to develop a verification method for quantum programs in 
the Sharir-Pnueli-Hart style. According to the Hilbert space formalism of quantum mechanics, the state space of 
a quantum program is supposed to be a separable Hilbert space. A state of the program is described by a density 
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operator. Then program is modeled by the quantum counterpart of a Markov chain, namely, a quantum Markov 
chain. The transitions in the quantum Markov chain is depicted by a super-operator, which transforms density 
operators to themselves. The reasonableness of this model can be argued from the following three aspects: 

• First, super-operators are one of the most popular mathematical formalisms of physically realizable opera- 
tions allowed by quantum mechanics 1.18,1 . including of course all the operations that quantum computers 
can perform. 

• Second, this model coincides with Selinger's insight of representing quantum programs as super-operators I2TII . 

• Third, super-operators are widely used as the mathematical model of quantum communication channels so 
that the technique developed in this paper can be conveniently applied in verifying quantum communication 
protocols. 

By exploiting the Schrodinger-Heisenberg duality between quantum states and observables, we are able to 
generalize the Sharir-Pnueli-Hart method to reason about quantum programs within the quantum Markov chain 
framework. In particular, a completeness theorem for the Sharir-Pnueli-Hart verification method of quantum 
programs is established, which indicates that the method is in principle effective for verifying all properties of 
quantum programs that can be expressed in terms of Hermitian operators (observables). 

Although the completeness theorem guarantees its universal effectiveness, the quantum Sharir-Pnueli-Hart 
method is often not feasible in practice since usually a very complicated calculation involving iterations of super- 
operators is required in its applications. For the case of finite-dimensional state spaces, each super-operator enjoys 
a matrix representation which is easier to manipulate than the super-operator itself. By using this powerful math- 
ematical tool, we find a method for verification of quantum programs in finite-dimensional state spaces much 
simpler than the Sharir-Pnueli-Hart method. The effectiveness of this simplified verification method depends upon 
the condition that the modules of all eigenvalues of a certain matrix are strictly smaller than 1. Fortunately, a 
delicate matrix analysis allows us to vanish the Jordan blocks of the matrix corresponding to those eigenvalues 
with module 1, and thus warrants the effectiveness of the simplified method. 

Another difficulty in the practical applications of the Sharir-Pnueli-Hart method often arises in checking ter- 
mination condition. We are able to provide some alternate termination conditions much easier to check than the 
original one in the case of finite-dimensional state spaces also by employing the matrix representation of super- 
operators and Jordan decomposition of matrices. 

The paper is organized as follows: Some preliminaries are presented in Sec.|2] In Sec. [3l the Quantum Sharir- 
Pnueli-Hart method is introduced, and a simple example is provided to illustrate how to use this method . Also, 
correctness and completeness of the method are proved. A simplified verification method only suited to quantum 
programs in finite-dimensional state spaces is proposed in Sec. |4] Sec. [5] is devoted to examine termination of 
quantum programs in finite-dimensional state spaces. For readability, the proofs of two technical lemmas used in 
Sec. m and [5] are postponed to the appendix. 

2 Preliminaries 

2.1 Sharir-Pnueli-Hart Method 

For convenience of the reader, we briefly review the Sharir-Pnueli-Hart method. A comparison of this method 
and its quantum generalization presented in Sec. |3]is very helpful for the understanding of the latter. 

Let S be the set of program states, which is finite or countably infinite. We assume that T C 5 is the set of 
terminal (absorbing) states, and write I = S \ T. A program is understood as a probabilistic transition on S. A 
single step of the program is represented by a matrix P = {Pij)ij^s of transition probabilities, where Pij is the 
probability of moving from state i to state j for each i,j G S. It is reasonable to assume that Pij = 6ij for all 
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j G if i G T is a terminal state. We also assume an initial distribution fi^ = {fi^)i^s of the program state, where 
/i-' is the probability that the program is initially in state i for each i £ S. So, a program can be modeled by a 
Markov chain with transition probability matrix P and initial distribution /i'^. An execution of the program is then 
a path in the Markov chain; that is, a sequence of states in S. For any n > 0, we define n^'"'^ to be the distribution 
of the program state after n steps; that is, for each i ^ S, 

^("■) _ Pj.^i]^q program is in state i after n steps} 

where = {PJj)ij^s is the nth power of P. For any i,j^S and n > 1, we also define: 

f-J"^ = Pr{the program reaches state j from state i 



for the first time in exactly n steps} 



n-l 



E n 

ii,...,i„_ieS\{j} A:=0 



where iQ = i and i„ = j. We write: 

oo 

f* _ An) 
J ij ■' ij 

n=l 

for each i,j G S. Intuitively, f*j is the probability of ever getting to state j from state i. Furthermore, for each 
terminal state j G T, we define jjL* to be the probability that the program ever gets to state j: 
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and it is obvious that fi* = (/U*)jgT is the (partial) distribution of the program's terminal state. Thus, the program 
can be seen as a distribution transformer, which sends the initial distribution fi^ to the distribution fi* of terminal 
states, and this transformer can be considered as the denotational (input-output) semantics of the program. 

As one can imagine, in the general case, the distribution //* of the program's terminal state is very difficult 
to compute explicitly. However, Sharir, Pnueli and Hart ll23l discovered an effective method to verify a class of 
properties of the program. They first observed that a large class of important properties of probabilistic programs, 
e.g. the expected running time, the probability of termination, the expected value of some program variable, can 
be represented by a linear functional of fi* of the form: 

where /Sj > for all j G T. Their method for computing ip{iJ-*) is indeed a probabilistic generalization of the 
Floyd inductive assertion method. The main idea is to find an invariant of the distribution transformer so that one 
can trace back to the initial distribution through all immediate distributions. More precisely, what we need 
to do is to find a completion /3 = (/3j)jg5 of the partial vector {j3j)j^T on the whole set of program states, with 
13 j = (5j for all j £ T and /3i > for all f G /. If /3 satisfies the following conditions: 

. (Vl)^(^O) 'i/E.e5/^?A<oo; 
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. (V2) P/? = /3; 

• (V3) (/3— termination) Y^^^j l^i^^ f^i when n — )• oo, 
then we conclude: 

. (C) = 95(^0). 

Thus, computing the functional ipifi*) of the terminal distribution /i* can be done by computing a linear functional 
^{fj-^) of the initial distribution f/'. 

This method can be understood better if we compare it with the Floyd method in the following way: Condition 
(VI) is a probabilistic version of saying that ip is true in the initial state; (V2) means that (3 is an invariant of 
the program (a fixed point of P), and thus it is analogous to the local verification condition; (V3) means that the 
program terminates. The implication from (VI), (V2) and (V3) to (C) is thus the analogue of partial correctness. 

The Sharir-Pnueli-Hart method was shown to be complete in the sense that any partial vector can be 

extended to /3 required by the method: 

Theorem 2.1 (Sharir, Pnueli and Hart 1 23 J ) There always exists a completion j3 = {Pj^)i^s of {f3j)j^T, which 
satisfies (V2) and either satisfies (VI ), (V3) and thus ( C), or else = oo. More explicitly, the least fixed-point 

(3 of equation Pf3 = /3, 13 > is such a completion, with 

for every i G I. 

2.2 Quantum Domains 

We assume that the reader is familiar with the Hilbert space formalism of quantum theory. Let Hhea. separable 
Hilbert space, which is the state space of the quantum systems considered in this paper. We adopt the Dirac 
notation, using \ip), ... to denote vectors in H. The inner product of vectors \ip), {tp) is written {ip\ijj). The 
Lowner order of operators is defined as follows: A Q B if and only if i? — yl is a positive operator. Recall that a 
partial density operator is a positive operator p with its trace tr{p) < 1. In particular, if tr{p) = 1, then p is called 
a density operator. A (mixed) state of a quantum system is represented by a density operator. An operator M is 
said to be Hermitian if its conjugate operator = M. An observable on a quantum system is described by a 
Hermitian operator. A quantum predicate was defined by D'Hondt and Panangaden 1,11,1 to be an observable C /, 
where / is the identity operator on H. 

A main result in this paper depends on the convergence of a certain sequence of observables, which is guaranteed 
by the following: 

Proposition 2.1 ( I^J] \T7\ \26\l ) Both the set of partial density operators and the set of quantum predicates, equipped 
with the Lowner order, are a CPO (complete partial order). 

One of the mathematical formalisms of physically realizable operations allowed by quantum mechanics is the 
notion of super-operator. A super-operator on is a linear operator £ from the space of linear operators on H 
into itself, which satisfies the following two conditions: 

1. tr[£{p)\ < tr{p) for each partial density operator p; 

2. Complete positivity: for any extra Hilbert space Hr, (Zr (g) £){A) is positive provided ^ is a positive 
operator on ® H, where X/j is the identity operation on Hr. 
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If condition 1 is strengthened to tr[8{p)] = tr{p) for all partial density operators p, then 8 is said to be trace- 
preserving. The following theorem gives an elegant representations of super-operators. 

Theorem 2.2 ( U^V , Theorem 8.1) Kraus Operator-Sum Representation: £ is a super-operator on H if and only 
if there exists a set of operators {Ei} satisfying: 

1. £{p) = EipE\ for all density operators p, 

2. ^ • E\Ei C I, with equality for trace-preserving £, where I is the identity operator on H. 

The Lowner order induces a partial order between super-operators in a natural way: £ Q T if and only if 
£{p) E J^{p) for all partial density operators p. The convergence of a certain sequence of super-operators is 
required in the proof of a key lemma in this paper. It is guaranteed by the following: 

Proposition 2.2 f/EZI l26l/ ) The set of (not necessarily trace-preserving) super-operators equipped with C is a 
CPO (complete partial order). 

2.3 Schrddinger-Heisenberg Duality 

Now we can introduce a duality between states described as density operators and observables described as 
Hermitian operators. This duality will be our main tool in developing the Sharir-Pnueli-Hart method for verifying 
quantum programs. 

Definition 2.1 Let £ be a super-operator mapping (partial) density operators to (partial) density operators, and 
let £* be a super-operator mapping Hermitian operators to Hermitian operators. If we have 

tr[M£{p)] = tr[£*{M)p\ 

for any (partial) density operator p, and for any Hermitian operator M, then we say that £ and £* are ( Schrodinger- 
Heisenberg) dual. 

p ^ £{p) 

t tr[£*{M)p]=tr[M£{p)\ % 

£*{M) 4^ M 

The mapping p ^ £{p) is the Schrodinger picture, and the mapping M i— )• £*{M) is the Heisenberg picture. 

Figure 1. Schrddinger-Heisenberg Duality 

The following proposition gives an operator-sum representation of the dual of a super-operator, which will be 
frequently used in the sequent sections. 

Proposition 2.3 If £ has the operator-sum representation 

£{p) = Y,EipE\ 
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for all density operators p, then we have: 

£*{M) = Y,ElMEi 

i 

for all Hermitian operators M. 

Proof: It suffices to see that for any density operator p, by definition we have: 

tr[£*{M)p\ = tr[M£{p)] = tr[M(^E,pE\)] 

i 

= ^tr{MEipEl) = Y,tr{E\MEip) 

i i 

= tr[{Y^E\ME,)p\.U 

i 

The duality considered in this subsection was also exploited by D'Hondt and Panangaden fTTl to establish an 
elegant connection between the state transformer (forward) semantics and the predicate transformer (backward) 
semantics of quantum programs. 

2.4 Matrix Representation of Super-Operators 

The matrix representation of a super-operator is usually easier to manipulate than the super-operator itself. This 
technique will be extensively used in Sec.|4]and|5] 

Definition 2.2 Suppose super-operator £ on a finite-dimensional Hilbert space H has the operator-sum repre- 
sentation: 

£{p) = Y,E.,pE\ 

i 

for all partial density operators p, and dimiJ = d. Then the matrix representation of £ is the following x 
matrix: 

M = Y,Ei0E*, 

i 

where A* stands for the conjugate of matrix A, i.e. A* = {a*j) with a*j being the conjugate of complex number 
Qij, whenever A = (aij). 

The next is a key lemma for the proofs of the main results in Sec. |4] and |5] Also, it is easy to see from the 
next lemma that the matrix representation of a super-operator is well-defined: if super-operator £ has another 
operator-sum representation: 

£{p) = Y,F,pFj 
j 

for all partial density operator p, then 

Y,E^0E* = Y,Fj(S)F*. 

i j 

Lemma 2.1 We write \ ^) = for the (unnormalized) maximally entangled state in H ® H, where is 

an orthonormal basis of H. Let M be the matrix representation of super-operator £. Then for any d x d matrix 
A, we have: 

{£{A)(g)I)\<^) = M{A(^I)\<^). 
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Proof: We first observe the following matrix equality: for any matrices A, B and C, 

{A ®B){C®I)\^) = {ACB^ ^ 
where B^ stands for the transpose of matrix B. Now it follows that 

M{A /)|$) = ^{E, <g) E*){A 7)1$) 

i 

= ^{E^AE} = {£{A) ^ 7)1$). □ 

i 

3 Quantum Generalization of Sharir-Pnueli- Hart Method 

We first define the model of quantum programs. Let 77 be a separable Hilbert space. It will be regarded as 
the state space of quantum programs. A quantum program is considered as a quantum operation on 77, which 
transforms a (mixed) state in 77 to another. Following S dinger [21], a single step of the program may be depicted 
by a trace-preserving super-operator £ on 77. Suppose that po is the initial state. An execution of the program 
starts in po and repeatedly implements the quantum operation represented by £. Formally, we introduce: 

Definition 3.1 A quantum Markov chain is a triple (77, £, po), where: 

1. 77 is a (separable) Hilbert space; 

2. £ is a trace-preserving super-operator; and 

3. pq is a density operator 

In this paper, since the state space 77 is fixed, we simply say that the pair {£, po) is a. quantum Markov chain. 

We assume that the program has a terminal (absorbing) space. At the end of each execution step, we check 
whether the program reaches a terminal state or not. This is modeled by a yes-no measurement {Mq, Mi}: if the 
outcome of the measurement is 0, then the program terminates, and we can imagine the program state falls into 
a terminal space and it remains there forever; otherwise, the program will enter the next step and continues to 
perform the quantum operation £. So, the execution can be seen as a quantum Markov chain (<f , po) together with 
a termination test {Mq, Mi}. The program is essentially a generalization of the quantum loop considered in |[27l 
so that the loop body is allowed to be a super-operator. 

To simplify the presentation, we define super-operator: 

£^ip) = MipM} (1) 

for any partial density operator p, and i = 0, 1. Then the execution of the program can be more precisely described 
as follows. At the first step, we perform the termination measurement {A7o,Mi} on the initial state p^. The 
probability that the program terminates; that is, the measurement outcome is 0, is pi = tr[<5o(po)]) and the 
program state after termination is pi = £q{pq)/pi. We adopt Selinger's normalization convention ||2TI to encode 
probability pi and density operator pi into a partial density operator pipi = £o{po). So, £o{po) is the partial 
terminal state obtained at the first step. On the other hand, the probability that the program does not terminate; 
that is, the measurement outcome is 1, is pj^ = tr[£i{pQ)], and the program state after the outcome 1 is obtained is 
p^ = £i{pq)/p^ . Then they are combined to get a partial density operator Pi Pi = £i{po), and it is transformed 
by the defining super-operator of the quantum Markov chain to {£ o £i)[pq), upon which the second step will be 
executed. In general, the (n + l)th step is executed upon the partial density operator 

p^p^ = {£o£inp), 
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where is the probabiUty that the program does not terminate at the nth step, and is the program state when 
the program does not terminate at the rath step. The probabihty that the program terminates in the (ra + l)th step 
is then 

Pn+i = tr{[£oo{£o£^r]{po)), (2) 
and the probabiUty that the program does not terminate in the (n + l)th step is then 

P^+i = tr{[£io{£o£,r]{po)). (3) 

The program state after the termination is 

Pn+l = [£o £l)"']iPo)/Pn+l, 

and combining them yields the partial terminal state of the program at the (ra + l)th step: 

Pn+lPn+l = [£o O {£ o£i)"]{pq). 

Thus, the (total) terminal state of the program is obtained by summing up the partial computing results at all steps. 
Formally, it is given by 

oo 

P* = ^[£oo{£o£,r]{po). 

n=0 

Furthermore, we can understand that a super-operator £ together with a termination measurement {Mo,Mi} 
defines a quantum program scheme. Whenever an initial state po is fed into the program scheme, we get a program 
and it computes the terminal state p*. Thus, the program scheme transforms initial state po to terminal state p*, 
and it defines a super-operator T : pQ^ p*. 

The following proposition gives a recursive characterization of quantum program. 

Proposition 3.1 1. The super-operator T satisfies the following recursive equation: 

F{p)=£o{p)+n{£o£^){p)] (4) 

for all density operators p. 
2. The dual J-* of J- is defined by the following equation: 

^*(M) = £^{M) + {£{ o £*)[J^*{M)] (5) 

for all Hermitian operators M. 

Verification Problem for Quantum Programs: Now we consider a positive observable modeled by Hermitian 
operator P □ 0, where is the zero operator on H. As will be shown in the examples below, a class of interesting 
properties of the quantum program can be expressed as the average value (or expectation) 

{P),.=^tr{Pp*) 

of observable P in the terminal state p* of the program. Our question is then: how to compute it? 

The main aim of this paper is to develop a verification method in the Sharir-Pnueli-Hart style to solve this 
problem. 

Solving the Problem: Recall that in the probabilistic case, a nonnegative vector /3 = {j5j)j^T is given over 
the set T of terminal states, and the task is to compute its expectation with respect to the terminal distribution of 
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the program. The Sharir-Pnueh-Hart method requires to find a completing /3 = {Pi)i^s over the whole set S of 
program states satisfying conditions (VI), (V2) and (V3). 

A unexpected difficulty comes out when we try to generalize this method to the quantum case: The notion that a 
vector /3 is a completion of another vector P is ready and simple. The quantum analogue of vector ^ is the positive 
operator P. What is the quantum analogue of the completion /? of /3? Note that /3 is defined merely over a subset 
T of S, and /3 can be obtained by adding its values in the remaining states in S* \ T. However, P is defined already 
on the whole space H of program states but not one of its subspaces. So, at the first glance it seems hopeless to 
define a completion of P which must also be an operator on H. After a careful analysis, however, we understand 
that 

M^PMo + mIqMi 

with a positive operator Q on H can be seen as a completion of P with respect to the termination measurement 
{Mo, Ml}. Once a suitable completion of P is discovered, it is relatively easy to conceive the quantum counter- 
parts of conditions (VI), (V2) and (V3). They are displayed as follows: 

. (QVl) {M^qPMq + mIqMi)p, < oo; 

• (QV2) S*{M^qPMo + mIqMi) = Q; 

• (QV3) (Q-termination) 

lim tr{Q[Sio{SoSir]{po)) = 0, 

n— >-oo 

It is interesting to compare (QVl) with (V2). Note that in (QVl) the dual £* but not £ itself is used. This shows 
that the Schrodinger-Heisenberg duality must be taken seriously for quantum programs. But it is not the case in 
condition (V2) for probabilistic programs. 

Recall that the Sharir-Pnueli-Hart method is based on the implication from (VI), (V2) and (V3) to (C). Similarly, 
if (QVl), (QVl) and (QV3) imply 

• (QC) (P)p. = {M^qPMo + mIqMi)p„ 

then its quantum generaUzation can be stated as follows: 

• Quantum Sharir-Pnueli-Hart method: To compute the average value {P)p* of positive observable P in 
the terminal state p* of the program, one only needs to find a positive operator Q satisfying conditions 
(QVl), (QV2) and (QV3). Then the problem of computing {P)p* is reduced to computing the average value 
{M^PMo + mIqMi)pq of observable M^PMq + mIqMi in the initial state po of the program. 

It is worth noting that P is assumed to be positive in the above presentation of quantum Sharir-PnueU-Hart 
method. The positivity of P is essential in the proofs of the correctness and completeness theorems below, where 
the monotonicity of certain sequences of (super-)operators is crucial. In practical applications, however, the posi- 
tivity of P is not essential. In fact, for any observable (Hermitian operator) O, it holds that O = Pi — P2 for some 
positive operators Pi and P2. Thus, we can use the above quantum Sharir-PnueU-Hart method to compute {Pi)p* 
and {P2)p*, respectively, and we obtain: 

{0)p, = {Pi)p, - {P2)p^ 

provided {Pi)p* / 00 or {P2)p* / 00. 

We postpone the proof of the correctness of the quantum Sharir-Pnueli-Hart method to a separate subsection, 
but now present a simple example to show how to use it. 
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Example 3.1 We consider the bit flip channel, which is widely used in quantum communication. This channel 
flips the state of a qubitjrom |0) to |1) and vice versa, with probability 1— p, 0<p< 1 (see [18], Sec. 8.3.3). It 
is described by the super-operator E on the 1— dimensional Hilbert space H2, deflned as follows: 

Sip) = EopEo + EipEi 

for all density operator p, where Eq = y/pl, and Ei = a/1 — pX. Assume that the initial state is po = \ipo){ipo\ 
with {ipo) = a\0) + /3|1), and the termination measurement M = {Mq, Mi} is the measurement in the computa- 
tional basis, i.e. Mq = 1 0) (0 1 , Mi = 1 1 ) ( 1 1 . 

Let us compute the termination probability of the program deflned by super-operator E, initial state pQ and 
termination measurement M. Then we take P = |0)(0|, and the termination probability is {P)p*, where p* is the 
terminal state of the program. To use the quantum Sharir-Pnueli-Hart method, we need toflnd a positive operator 
Q satisfying condition (QV2). It is reasonable to assume that Q = X\ip){ip\ + such that {\<f), is an 

orthonormal basis of H2, and A, /i > 0. We write: 

N = M^PMq + mIqMi. 

A routine calculation leads to N = |0)(0| + -R'|l)(l|, and 

8*{N) = [p+{l-p)Km{{)\ + [pK+{l-p)\\l){l\ 

where and in the sequel 

K = xMi)\'' + P^\m)? ■ 

Then condition (QV2) becomes £*{N) = Q, and it yields that 

K = (1|Q|1) = (l|r (iV)|l) =pK + {l-p). (6) 
On the other hand, by a routine calculation we obtain: 

[£:io(£:o£:i)"](pO) = |/3|V|i)(i|, 

tr{Q[£^o{£o£^r]{p^)) = \P\^Kp\ 
We consider the following three cases: 

• Case 1. p < 1. We always have (QV3). It follows from Eq. ^ that K = 1. So, N = I, and the assertion 
(QC) implies the termination probability {P)p* = (-^)po ~ (^ol^l^o) = 1- 

• Case 2. fi = Q. Again, condition (QV3) automatically holds. Then \tPq) = e*^|0) /or some real number 9, 
and by (QC) we obtain the termination probability {P)p* = (V'ol-^IV'o) = 1- 

• Case 3. /3 ^ and p = 1. To guarantee (QV3), we must take K = 0. Then N = \0){0\, and the termination 
probability {P)p* = (V'ol-^lV'o) = 

3.1 Correctness Theorem 

This subsection is devoted to prove the correctness of the quantum Sharir-Pnueh-Hart method: 

Theorem 3.1 ( Correctness) The quantum Sharir-Pnueli-Hart method is correct; that is, ( QVl ), ( QV2) and ( QV3) 
imply ( QC). 
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A key intermediate step in the proof of the above theorem is the calculation of the expectation in the right-hand 
side of (QC). It can be stated as the following: 

Lemma 3.1 IfQ satisfies (QV2), then for any n > 0, we have: 

n 

{mIpMo+mIqMi),, =J2HP[£o o o^i)^](po)) 

+ tr{Q[eio{8oSiT]{po)). 

Proof. The key of this proof is repeated applications of the Schrodinger-Heisenberg duality between states and 
observables defined in Subsec. 12.31 We proceed by induction on n. For the case of n = 0, it holds that 



RHS = tr{PMopoA4) + tr{QMipoMl) 

= tr[{M^PMo + mIqMi)po] = LHS. 

We now consider the case of n + 1. First, by (QV2) and the duality between £ and £*, we have: 

n=^tr{P[£oo{£o£,r+\po)) 

+ tr{Q[£io{£o£^)^+^]{po)) 
= tr[PMo{£ o £^)^+\po)M^q] 

+ tr[QMi{£o£^)^+\po)Ml] 
= tr\{MlPMo + mIqMi){£ o fi)"+i(po)] 
= trUM^^PMo + mIqMi)£{[£i o {£ o £ir]{po))} 

= tr{£*{MlPM^ + mIqMi)[£i o {£ o ^i)"](po)} 
= tr{Q[£io{£o£^)^]{po)}. 

Then it follows from the induction hypothesis for the case of n that 

n+l 

RHS = ^ tr{P[£o o {£ o £i)'']{po)) 

k=0 

+ tr{Q[£io{£o£,)^+^]{po)) 

n 

k=0 
n 

= ^tr{P[£oo{£o£,)'^]{pQ)) 

k=0 

+ tr{Q[£io{£o£,)^]{po)) 

= LHS. □ 

The above lemma will also be needed in the proof of the completeness theorem below. Now we are ready to 
prove the correctness theorem. 

Proof of Theorem 1X71 Combining Lemma IXTI and conditions (QVl), (QV2) and (QV3), we obtain: 
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{MlPMo + MlQMi)p, 

n 

= lim y^tr{P[£oo{£o£^f]{p^)) 

fc=0 

n 

= lim tr(VP[£:oo(£:o£:i)^-](po)) 

n— >oo 

k=0 

n 

= lim tr{Py^[£^o{£o£^f]{p^)) 

A:=0 
n 

^=^r(lim Py^[£^o{£o£^f]{p^)) 

fc=0 
n 

^^tr{P lim V[£:oo(^:o£:i)'^](po)) 

n— >oo 

k=0 

= tr{Pp*) = {P)p,. 

Note that the existence of the limits in the above equation is guaranteed by the fact that the set of partial density 
operators equipped with the Lowner order is a CPO (see Proposition 12. IK and the equalities labeled by (a) and (b) 
are derived by the continuity of trace and the continuity of multiplication of operators, respectively. □ 

3.2 Completeness Theorem 

The quantum Sharir-Pnueli-Hart method was used in the last section to compute the termination probability 
of a simple quantum program used in quantum communication. It is natural to ask the question: Can it be used 
to more complicated quantum programs? Furthermore, one may ask: Is the quantum Sharir-Pnueli-Hart method 
complete? More precisely, for any positive observable P, can we always find a positive observable Q such that 
we only need to compute the average value of observable MqPMq + M^QMi in the initial state po in order to 
compute the average value of P in the terminal state p*l The following theorem gives a positive answer to this 
question: 

Theorem 3.2 (Completeness) For any positive observable P, there is always a positive observable Q satisfying 
condition (QV2), and 

1. ifQ satisfies ( QVl ), then it also satisfies ( QV3) and thus ( QC); 

2. if it does not satisfies (QVl), then {P)p* = oo. 

Indeed, Q can be chosen to be the least fixed-point of the following equation: 

£*{mIpMq + mIqMi) = Q,Q>0. (8) 

Proof. We put: Qq = 0, and 

Qn+i = mIpMq + Ml£*{Qn)Mi, n > 0. 

It can be easily shown by induction on n that {Qn] is an increasing sequence according to the Lowner order. Thus, 
we can define: 

oo 

Q = £*{\l Qn). 

n=0 
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(1) We first show that Q is well-defined. It suffices to prove the existence of supremum VJ^o With its 
monotonicity, we only need to demonstrate that sequence {Qn} is bounded from up. Indeed, we have: Qn E 
F*{P) for every n > 0. We prove this claim by induction on n. The case of n = is obvious. Assuming the 
claim is correct for the case n, we obtain: for any density operator p, 

tr{Qn+ip) = tr[{MlPMo + mIe* {Qn)M{)p\ 

tr{PMopMl) + tr[Qn£{MipMl)] 
= tr{P£Q{p))+tr[Qn{£o£^){p)] 

< tr{P£^{p)) + tr[T*{P){£ o £^){p)] 

^^tr{P£,{p) + PF[{£oS,){p)]) 
= tT{P{£o{p)+F[(£o£,){p)])) 

tr{PF{p))=tr{F*{P)p). 

Here, equalities labeled by (a) and (c) are derived by the Schrodinger-Heisenberg duality, (b) by the induction 
hypothesis, and (d) by Eq. dH). So, Qn+i E J^*{P), and the claim is proved. 

(2) Second, we prove that Q satisfies (QV2). It suffices to show that 

tr[£*{MlPMQ + mIqMi)p\ = tr{Qp) 

for any density operator p. The key is also repeated applications of the Schrodinger-Heisenberg duality. It follows 
from continuity of trace operator tr(-) that 

LHS = tr[{MlPMQ + mIqMi)£{p)] 
= tr[MlPMQ£{p)] + tr[MlQMi£{p)] 
= tr[MlPMQ£{p)] + tr\QMi£{p)Ml] 

oo 

= tr[MlPMQ£{p)]+tr[{\J Qn)£{Mi£{p)Ml)\ 

n=0 

oo 

= tr[MlPMo£{p)] + \l tr[Qn£{Mi£{p)Ml)] 

n=0 
oo 

= tr[Ml,PMo£{p)] + V tr[£*{Qn)Mi£{p)Ml] 

n=0 
oo 

= tr[M^oPMo£{p)] + V tr[Ml£*{Qn)Mi£{p)] 

n=0 

oo 

= y tr[{M^oPMo + Ml£*{Qn)Mi)£{p)] 

n=0 

oo oo 

= V tr[Qn+i£{p)] = ir[( V Qn+i)£{p)] 

n=0 n=0 

oo 

= tr[{\/ Qn)£{p)]=RHS. 

n=0 
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(3) Third, we show that Q is the least fixed-point of Eq. ([H). Suppose that Q satisfies (QV2). First, we show 
that tr[Qn£{p)\ < tr{Qp) for any density operator p and for all n > by induction on n. The case of n = is 
trivial. If the conclusion is correct for the case of n, then we have: 

tr[Qn+i£{p)] = tr[{MlPM^ + mIe* {Qn)M{)£{p)] 
= tr[MlPMQS{p)] + tr[Ml8*{Qn)Mi8{p)] 
= tr[MlPMo£{p)] + tr[Qn£{Mi£{p)Ml)] 
< tr[MlPMo£{p)] + tr[QMi£{p)Ml] 
= tr[{MlPMQ + mIqMi)£{p)] 
= tr[£*{M^^PMo + mIqMi)p] = tr{Qp), 

and the conclusion also holds for the case of n + 1. 
Now, we obtain: 

oo oo 

tr{Qp) = tr[( V Qn)£{p)] = V tr[Qn£{p)] < tr{Qp) 

n=0 n=0 

for all density operator p. Consequently, Q < Q, and Q is the least fixed-point of Eq. ([8]). 

(4) We claim that 

n 

tr[P£o{p) + Qn{£o£i){p)]=^tr{P[£oo{£o£,)>']{p)) (9) 

k=0 

for all density operators p and for all n > 0. To prove Eq. we proceed by induction on n. The case of n = 
is obvious. If Eq. ^ is valid for the case of n, then we have: 

tr[P£oip) + Qn+ii£ o £i)ip)] = tr{P£o{p))+ 
tr[P{£o o {£ o £,)){p)] + tr[£*{Qn){£i o {£ o £,)){p)] 
= tr{P£o{p)) + tr[P£{{£ o £^){p)) + Q^{£ o £^f{p)] 



tr{P£o{p)) + i^Pi^o o {£ o £i)'']{{£ o £,){p))) 

k=0 

n+1 

Y,tr{P[£oo{£o£,)f']{p)). 



k=0 



Now it follows from Eq. ^ that 

(Mq^PMo + m|QMi)^o = tr(P£:o(p°)) + tr(Q£^{p'')) 

oo 

= tr(Pfo(p°)) + tr[{ V Qn){£ o £,){p^)] 



n=0 



y tr[P£oip') + Qni£ o £,){p^)] (10) 

n=0 

oo 

Y,tr{P[£oo{£o£,r]{p')) 



n=0 

tr{Pp*) = {P)p, 
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If Q satisfies (QVl), i.e. {M^PMq + MlQMi)pO < oo, then we derive that Q satisfies (QV3), i.e. 

lim (Q[£ o {£ o £,y^]{p^)) = 

n—^oo 

by combining Eq. (fTOl ) and Lemma [3TT] For the case that Q violates (QVl), Eq. (flOl ) implies that {P)p* = oo. □ 
4 Verification in Finite-Dimensional State Spaces 

The Sharir-Pnueli-Hart method developed in the last section can be used to verify properties of quantum pro- 
grams both in finite-dimensional state spaces and in infinite-dimensional state spaces. In this section, we present 
a much simpler verification method for the case of finite-dimensional state spaces. 

We consider the program defined by quantum Markov chain {£, po) with termination test {Mq, Mi} in a finite- 
dimensional state Hilbert space H. Suppose that super-operator £ has the operator-sum representation: £ = 
EipE\ for all partial density operators p. Recall that super-operators £i {i = 0, 1) are defined by Eq. ([Hi. For 
simplicity of presentation, we write Q for the composition of £ and £i: Q = £ o £i. Then Q has the following 
operator-sum representation: 

g{p) = Y,EiMipMlEi 

i 

for all partial density operators p. Let the matrix representations of super-operators £o and Q are 

Ni = Mi0 M*, i = 0,l, 

M = Y,{EiMi)®{E,Mi)\ (11) 

i 

respectively (see Definition 12.21 ). Suppose that the Jordan decomposition of M is M = SJ{M)S~^ , where is a 
nonsingular matrix, and J{M) is the Jordan normal form of M: 

J{M) = diag{Jk^{Xi),Jk2{X2),- ■ •, Jfe,(A/)) 

with Jfcj(As) being a. kg x /c^ -Jordan block of eigenvalue As (1 < s < /) (see fT6l, Sec. 3.1). The next lemma 
describes the structure of the matrix representation M of super-operator T. 

Lemma 4.1 1. \Xs\ < 1 for all 1 < s < I. 

2. If\Xs\ = l then the dimension of the sth Jordan block kg = 1. 

The verification method of this section heavily depends on the convergence of power series Af " of matrix 
M. But this series may not converge when some of its eigenvalues has module 1. So, we need to modify the 
Jordan normal form J(M) of M by vanishing the Jordan blocks corresponding to those eigenvalues with module 
1, which are all 1— dimensional according to Lemma |4TT] This yields the matrix: = SJ{N)S^^, where 

J{N) = diag{J[,4,--;J3), 

J, ^ fo if |A.| = 1, 

\'^fca(As) otherwise, 

for each 1 < s < /. (Note that J^^ (A^) and J'^ are both 1x1 matrices when A^l = 1; see Lemma |4TT] ) 
The following technical lemma is crucial for the proofs of the main results in this and next section. 
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Lemma 4.2 For any integer n > 0, we have: NqM"^ = NqN^. 



The lengthy proofs of Lemmas 14.11 and 14.21 are postponed to the appendix. Now we are ready to present the 
main result of this section. 

Theorem 4.1 For any Hermitian operator P on the state space H, the expectation of observable P in the terminal 
state p* of the program is 

{p)p. = {<^\{p®i)NQ{i-N)-\pQ®im, 

where I is the identity operator on H, and \^) = is the (unnormalized) maximally entangled state in 

H ® H, with {|j)} being an orthonormal basis of H. 



Proof: It follows from Lemma |2J] together with the defining equation of Eq and F that 

[F{p)(^I]\^) = M{p®I)\^). 
By first applying Eq. ([121) and then repeatedly applying Eq. ([T3]) . we obtain: 



{p*®im = [Y^£,{j^{p,))®m 

n=0 

oo 

= Y,[£o{r^{p^))®m) 

re=0 
oo 

= Y,[£o{r^ipo))®m) 

n=0 

oo oo 



n=0 

oo 



n=0 



n=0 n=0 

= No{I-N)-\po^im. 
The equality labeled by (a) follows from Lemma [421 Finally, we have: 

= tr{Pp*) = mPp* /|$) 

= {^\{P 1){p* 1)\<l>) 

= ($|(P I)No{I - N)-\po 7)1$). □ 
Example 4.1 We reconsider Example \3.1\ According to Eq. ([77]), put Nq = Mq (g) Mq and 



M = EqMi (g) £^0^1 + EiMi ® EiMi 



/ l-p\ 





V p / 



(12) 
(13) 
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The case of p = 1 is trivial. For the case of p < 1, we have: 



1 \ 





To compute the termination probability of the program, we consider the observable P = |0)(0| and write |$) = 
1 00) + 1 11). Then by Theorem \4. l\ and some routine matrix multiplications we obtain the termination probability: 

{P)p, = ($|(P ® I)No{I - N)-\po i)m 
= (0|po|0) + (l|po|l) 
= tr{po) = 1. 

To further illustrate the power of the verification method introduced above, we compute the average running 
time: X^J^i ^Pn of the program, where pn is the probability that the program terminates in the nth step (see 
Eq. ^ for the definition of It is clear that this cannot be done by a direct application of Theorem 14. 11 But a 
procedure similar to the proof of Theorem 14 . 1 1 leads to: 

Proposition 4.1 With the same notation as in Theorem \4.1\ the average running time of the program is 

($|iVo(/-Af)-2(po^/)|$). 

Proof: We have: 

oo oo 

Y,npn = Y,ntr[{£ooF^-^){p^)] 

n=l n=l 

oo 

n=l 

oo 

n=l 

oo 

= J]] n($|iVoiV"-i(/9o0 /)!«>) 

n=l 

oo 

= ($|iVo(J]niV""i)(po®/)|^) 

n=l 

= {^\No{I-Nr\po^I)\^). □ 
Example 4.2 Continuation of Example \4.1\ For the case ofp < 1, an easy calculation yields: 






(I-M)-i 



/ 1 

1 

1 

\ 



/ 1 











1 











1 
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So, by Proposition \4. 1 \ we see that the average running time of the program considered in Examples \3. l\ and \4. 1 1 is 

mNo{I - Mfipo I)\^) = {0\po) + (1 + -^)(l|po|l) 

1 — p 

, (l|Po|l) ^ 
1 — p 

In particular, if the initial state po = with = a\0) + /3|1), then the average running time is 1 + -j^. 

The techniques developed in this section can be further generalized to analyze the long-run behaviors defined 
by de Alfaro ifTOl and Brazdil, Esparza and Kucera |,6J for quantum programs in finite-dimensional state spaces. 

5 Termination of Quantum Programs 

It is usually not easy to check the termination condition (QV3) when applying the quantum Sharir-Pnueli-Hart 
method. The purpose of this section is to find some alternate conditions for termination of quantum programs in 
finite-dimension state spaces employing the ideas used in the last section. 

As in the last section, we assume that the state space H of quantum programs considered in this section is 
finite-dimensional. 

Definition 5.1 Consider the program defined by quantum Markov chain {£, po) and termination test {Mq, Mi}. 
7. We say that the program terminates if the nontermination probability in the nth step 

p^ = tr{[8,o{8oS^r-\p,)) = Q 
for some positive integer n, where iSj (z = 0, 1) are defined by Eq.^. 

2. We say that the program almost terminates if lim„^oo Pn — 0; where p^ is as in item 1 for every n > 1 
( also see Eq. ((21) ). 

It is obvious that almost termination is equivalent to (QV3) with Q = the identity operator / on H. On the other 
hand, almost termination implies (QV3) for every Q. 

The above definition is a generalization of Definition 3. 1 in fTJ], where only the case that <S is a unitary operator, 
i.e. for some unitary operator U, £{p) = UpU^ for all density operators p, is considered. 

The following lemma gives a simple termination condition in terms of the matrix representation of super- 
operators. 

Lemma 5.1 We consider the program defined by Markov chain (£, po) and termination test {Mq,Mi}. Let M be 
defined by Eq.Uli. and let \^) = \jj) be the (unnormalized) maximally entangled state in H ® H. Then we 
have: 

1. The program terminates if and only if M"'{pQ I)\^) = Ofor some integer n > 0; 

2. The program almost terminates if and only if 

lim M"(po® = 0, 
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Proof: We only prove the first conclusion, the second is similar. Since £ is trace-preserving, it follows from 
Eq. ([T3]l that 

tr{[E^ o {£ o EiT-\p,)) = tr{{£ o £ir]{po)) 

= ($|M"(/5o®/)|^'). 

Moreover, it is clear that {<^\M'"-{po (g) /)|$) = if and only if M'"-{po /)|$) = 0. □ 

We now turn to consider the terminating problem of quantum programs. Recall that a super-operator £ together 
with a termination test {Mq, Mi} can be understood as a program scheme. 

Definition 5.2 The program scheme is terminating (resp. almost terminating) if for every density operator p, the 
program generated from the program scheme with initial state p, i.e. the program defined by Markov chain {£, p) 
and termination test {Mq, Mi}, terminates (resp. almost terminates). 

Similar to Lemma ISTTl we have: 

Lemma 5.2 We consider the program scheme defined by super-operator £ and termination test {Mq, Mi}. 

1. The program scheme is terminating if and only /fM^I^) = 0/or some integer n > 0; 

2. The pvogvcifTi is olfnost tcunincitifig //"liin^_^oQ M"|^>) = 0, 
where M and |$) are as in Lemma lSJ] 

Proof: Notice that a program scheme is terminating if and only if it terminates when the initial state is po = 
I / dim H. Then this lemma follows immediately from Lemma ISTI □ 
We now present the main result of this section. 

Proposition 5.1 Consider the program scheme defined by super-operator £ and termination test {Afo, Mi}. Let 
M and \ ^) be as in Lemma \5J\ Then we have: 

1. For any integer k > the maximal size of Jordan blocks of M corresponding to eigenvalue 0, the program is 
terminating if and only if M^\^) = 0. 

2. The program is almost terminating if and only if\^) is orthogonal to all the eigenvectors of M correspond- 
ing to eigenvalue with module 1 . 

Proof: For part 1, if M^\(^) = 0, then by Lemma |S!2] we conclude that the program is terminating. Conversely, 
suppose that the program is terminating. Again by Lemma lS^ there exists some integer n > such that Af"|<I>) = 
0. We want to show that M^\^) = 0. Without any loss of generality, we assume the Jordan decomposition 

M = SJ{M)S~^, where 

J(M) = diag{Jk^{Xi),Jk2{X2),- • •, Jfc,(A/)) 

with |Ai| > • • • > |As| > 0, Xs+i = ■ ■ ■ = Xi = 0. Observe that M" = SJ"-{M)S-'^. Since S is nonsingular, it 
follows from M"|$) = that J"(M)5-i|$) = 0. We can write 

m> ^{tl)^ s-'i.) ^ ( ) , 

where 

A = diag{Jk^{Xi), Jk,{Xs)), 
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B = diag{Jk^^,{0),...,Jk,m, 
is a t— dimensional vector, \y) is a (cP — t)— dimensional vector, and t = kj. Then 



Note that Ai, ^ 0. So, Jfc^(Ai), Jfc^(As) are nonsingular, and A is nonsingular too. Thus, 

J"(M)S-i|$) = 

implies 74"|x) = and furthermore |x) =0. On the other hand, for each j with s + 1 < j < I, since k > kj, it 
holds that J^,{0) = 0. Consequently, = 0, J^(M)5-i|$) = 0, and 

M''\<^) = SJ''{M)S-^\^) = 0. 
For part 2, by Lemma ls!2l the program is almost terminating if and only if 

lim r\M)S-^\<^) = 0. 

n— >oo 

We assume that 

1 = I Ai I = • • • = I Aj.| > |Ar+l| ^ • • • ^ I A; I 

in the Jordan decomposition of M, and we write: 

jm ^ ( ^ ° ) . s-^m - ( |:> 

where 

C = diag{Xi, ...,Xr), 

D = diag{Jk,+^{\r+i), Jktih)), 

\u) is an r— dimensional vector, and \v) is a (d^ — r)— dimensional vector. (Note that Jfci(Ai), Jk,.{K) are all 
1x1 matrices because |Ai| = ... = \Xr\ = 1; see Lemma |4~T] ) 

If |<I>) is orthogonal to all the eigenvectors of M corresponding to eigenvalue with module 1, then \u) = 0. On 
the other hand, for each j with r + 1 < j < I, since |Aj| < 1, we have 

lim J"(A,) = 0. 

Thus, lim = 0. So, it follows that 

n— >oo 



lim J(Mr5"^|ci>) = lim =0. 

n— >-oo rn-oo \ 17 / 

Conversely, if 

lim J(M)"5-^|$) = 0, 

n— >oo 

then lim„^oo C"|n) = 0. This implies \u) = because C is a diagonal unitary. Consequently, |<1>) is orthogonal 
to all the eigenvectors of M corresponding to eigenvalue with module 1. □ 

The above two propositions considerably generalize Corollaries 5.2 and 6.2 in 127]. 
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6 Conclusion 



This paper develops a methodology for verifying quantum programs in which quantum programs aie modeled 
by quantum Markov chains and verified properties are described in terms of Hermitian operators. The Sharir- 
Pnueli-Hart method for verifying probabilistic programs is generalized into the quantum setting. For quantum 
programs with finite-dimensional state spaces, a simpler verification method is found, which is especially useful 
for analysis of long-run behavior like the average running time. The methodology developed in this paper mainly 
targets verification of programs for future quantum computers, but it also has potential applications in other areas 
such as verifications of quantum communication protocols and engineered quantum systems ??. Further studies 
will naturally go along two lines: 

• More Complex Programs: An interesting topic in this direction is verification of quantum programs with 
recursive procedures. A possible model of these programs is a quantum generalization of recursive state 
machines introduced by Alur et al. [2] and recursive Markov chains introduced by Etessami and Yan- 
nakakis [ 13 1. 

• More Sophisticated Properties: To express properties of quantum programs more sophisticated than those 
considered in this paper, a possible way is to define quantum extension of temporal logics. Baltazar et al. Bl 
already proposed a quantum computation tree logic, but more research in this direction is in order because 
some fundamental problems are still not well-understood, e.g. how can the notions of sequential and joint 
measurements that have puzzled physicists for many years be incorporated into temporal logic? 

A Proof of Technical Lemmas 

A. 1 Proof of Lemma 14.11 

Recall that the quantum program is defined by Markov chain (<f , po) together with termination test {Mq, Mi}, 
and the operator-sum representation of super-operator £ is as follows: £{p) = Yli ^iP^l for partial density 
operators p. Assume that the dimension of the state space H is d = dimH. We write Q = £ o £i and £i{p) = 
MipMi^ for any partial density operator p and i = 0, 1. 

Lemma A.l The super-operator Q + £q is trace-preserving: 



tr[{g + £o){p)]=tr{p) 



(14) 



for all partial density operators. 



Proof: It suffices to see that 



Mi\Y,Ei^E^)Mi + Mo^Mo 



Mi^Mi + MoUfo = /. □ 



Lemma A. 2 For any matrix A, there are positive matrices Bi, i?2 , -B3 , such that 



1. A = Bi- B2 + iBs - iBi,- and 



2. trBf < tr{A^A) {i = 1,2,3, 



4). 
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Proof: We can take Hermitian operators 

{A + At)/2 = - ^2, -i{A - ^t)/2 = ^3 - 

where i?i , i?2 are positive operators with orthogonal supports, and i^a , i?4 are positive operators with orthogonal 
supports. Then it holds that 

^trBi2 = ^tr(BitSi) 

< ^ ti{Bi^ Bi + B2) 
= \\{{A + A^)/2^jI)m\ 

<{\\{A®i)m\ + \\iA^®i)m)i'^ 

It is similar to prove that ivBi^ < tv{A^A) for i = 2,3,4- □ 

Lemma A.3 For any integer n > 0, and for any \a) in H 1^ H, we have: 

||M"|a)|| <4\/d|||Q)||. 

Proof: Suppose that |a) = X^j jOijIu)- Then we can write: \a) = {A ® where A = (uij) is a d x d 

matrix. A routine calculation yields: |||a)|| = VtrA^A. 

We write: A = Bi — B2 + iB^ — iB^ according to Lemma lA!2l The idea behind this decomposition is that 
the trace-preserving property Eq. (fT4)) only applies to positive operators. Put |/3j) = {Bi for i = 1,2, 3, 4. 
Using the triangle inequality, we obtain: 

4 4 
||M-|a)|| < ^ ||M"|ft)|| = ^ \\{T^{B,) ® /)|cl>)||. 

i=l 1=1 

Note that 

\\{r^{B,)^i)m = ^tT{r'-{B,)r, (15) 

trp2 < (trpf, (16) 
tr[r^{p)] < tr[(^ + Sorip)] = tip. (17) 
Combining Eqs. ([TSl l. ([16] ) and ([TtI) . one would see that 

Furthermore, by the Cauchy-inequality we have (trp)^ < d ■ (trp^). Therefore, 

4 

||F'"|a)|| < \Jd ■ tiBf < 4^d ■ tiiA^A) = 4Vd\\\a)\\n 

i=l 

Now we are ready to prove Lemma |4~T] We prove the first part by refutation. If there is some eigenvalue A of 
M with |A| > 1, suppose the corresponding normalized eigenvector is |x): M\x) = X\x). Choose integer n such 
that|A|" > 4\/d. Then ||M"|x)|| = ||A"|x)|| = |A|™ > 4v^|||x)||. This contradicts to LemmalA31 
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The second part can also be proved by refutation. Without any loss of generality, we assume that |Ai| = 1 
with A;i > 1 in the Jordan decomposition of M. Suppose that is the orthonormal basis of H ^ H 

compatible with the numbering of the columns and rows of M. Take an unnormalized vector \y) = S\ki). Since 
5 is nonsingular, there are real numbers i?, r > such that r • |||x)|| < H-SIx)!! < i? • |||x)|| for any vector |x) in 
H (iSi H. By definition, it holds that || |y) || < R- We can choose integer n such that nr > R ■ A^/d because r > 0. 
Then a routine calculation yields: 



ki 

t=i ^ ^ 



\ki-t), 



Consequently, we have: 

ki 



||M"|y)||>r.f^(' ^Vil"-* >nr 
t=i ^ ^ 

> R-4Vd>4Vd\\\y)\\. 

This contradicts to Lemma |A3] again. 
A.2 Proof of Lemma \4J\ 

Without any loss of generality, we assume 1 = |Ai| = • • • = |As| > |As+i| > • • • > |Ai|. Then 

where U = diag{Xi, ■ ■ •, As) is an s x s diagonal unitary, and 

Ji = dmg{Jk,+^{\s+i)r ■ ■,Jki{Xi)). 

Moreover, we have: 



JiN) 




Ji 



The convergence of X]^o('^o ° G"') follows immediately from Proposition 12.21 and it in turn implies the con- 
vergence of I]^o ^0^"- It is clear that 

oo oo 

^iVoM'" = Y^NoSJ{My'S-\ 

n=0 n=0 

Since S is nonsingular, we see that Yl'^=o NqSJ{M)^ converges. This implies that lim NqSJ(M)"' = 0. Now 

n— >oo 

we write: 

Q R 
S T 



NoS 



where Q is an s x s matrix, T is a {cP — s) x (d? — s) matrix, and d = dimH is the dimension of the state space 
H. Then 



NoSJ{My — ( ^j^n I 1 
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and it follows that lim„_,oo = and lim„_,oo = 0. So, we have: triQ'^Q) = lim tr(Q[/")tQC/" = 0, 
and tr{S^S) = lim tv^SW)^ = 0. This yields Q = and S = 0, and it follows immediately that 

n—>-oo 
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